🚀 GitHub Stacked PRs: A Practical Guide to Smaller, Faster Code Reviews
Large pull requests are difficult to review well. Continue reading on Level Up Coding »
🔗 Read more: https://levelup.gitconnected.com/github-stacked-prs-a-practical-guide-to-smaller-faster-code-reviews-77b63dfc227d?source=rss------gitops-5
📰 Source: Medium
📅 2026-08-17 15:27 UTC
#DevOps #Tech #Automation #CloudNative
Large pull requests are difficult to review well. Continue reading on Level Up Coding »
🔗 Read more: https://levelup.gitconnected.com/github-stacked-prs-a-practical-guide-to-smaller-faster-code-reviews-77b63dfc227d?source=rss------gitops-5
📰 Source: Medium
📅 2026-08-17 15:27 UTC
#DevOps #Tech #Automation #CloudNative
Medium
GitHub Stacked PRs: A Practical Guide to Smaller, Faster Code Reviews
Large pull requests are difficult to review well.
👍1
🚀 How canvases make agentic workflows visible, steerable, and cost-efficient
Chat is great for intent, but agent work gets lost in the scroll. Here is how I use canvases with my agentic workflows—and why your workflow also deserves a canvas.
The post How canvases make agentic workflows visible, steerable, and cost-efficient a...
🔗 Read more: https://github.blog/ai-and-ml/github-copilot/how-canvases-make-agentic-workflows-visible-steerable-and-cost-efficient/
📰 Source: GitHub Blog
📅 2026-08-17 16:00 UTC
#DevOps #Tech #Automation #CloudNative
Chat is great for intent, but agent work gets lost in the scroll. Here is how I use canvases with my agentic workflows—and why your workflow also deserves a canvas.
The post How canvases make agentic workflows visible, steerable, and cost-efficient a...
🔗 Read more: https://github.blog/ai-and-ml/github-copilot/how-canvases-make-agentic-workflows-visible-steerable-and-cost-efficient/
📰 Source: GitHub Blog
📅 2026-08-17 16:00 UTC
#DevOps #Tech #Automation #CloudNative
The GitHub Blog
How canvases make agentic workflows visible, steerable, and cost-efficient
Chat is great for intent, but agent work gets lost in the scroll. Here is how I use canvases with my agentic workflows.
🚀 Open Policy Agent v1.19.1 released
This release uses the latest version of Go (1.26.6) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use: https://pkg.go.dev/vuln/GO-2026-6218 https://pkg.go.dev/vuln/GO-2026-6091 https://pkg.go.dev/vuln...
🔗 Read more: https://github.com/open-policy-agent/opa/releases/tag/v1.19.1
📰 Source: GitHub Releases (Secrets & Security)
📅 2026-08-17 16:38 UTC
#DevOps #Tech #Automation #CloudNative
This release uses the latest version of Go (1.26.6) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use: https://pkg.go.dev/vuln/GO-2026-6218 https://pkg.go.dev/vuln/GO-2026-6091 https://pkg.go.dev/vuln...
🔗 Read more: https://github.com/open-policy-agent/opa/releases/tag/v1.19.1
📰 Source: GitHub Releases (Secrets & Security)
📅 2026-08-17 16:38 UTC
#DevOps #Tech #Automation #CloudNative
pkg.go.dev
GO-2026-6218 - Go Packages
Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
🚀 Managing variant drift with generic Helm templates
Generic helm templates push variant drift management into values files, which are not amenable to reusable tooling. Continue reading on ITNEXT »
🔗 Read more: https://itnext.io/managing-variant-drift-with-generic-helm-templates-f7b8433dd0b8?source=rss------gitops-5
📰 Source: Medium
📅 2026-08-17 16:58 UTC
#DevOps #Tech #Automation #CloudNative
Generic helm templates push variant drift management into values files, which are not amenable to reusable tooling. Continue reading on ITNEXT »
🔗 Read more: https://itnext.io/managing-variant-drift-with-generic-helm-templates-f7b8433dd0b8?source=rss------gitops-5
📰 Source: Medium
📅 2026-08-17 16:58 UTC
#DevOps #Tech #Automation #CloudNative
Medium
Managing variant drift with generic Helm templates
Generic helm templates push variant drift management into values files, which are not amenable to reusable tooling.
🚀 OpenTelemetry Collector service/telemetry/telemetrytest/v0.159.0 released
Module set beta, Version v0.159.0
🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Ftelemetry%2Ftelemetrytest%2Fv0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:22 UTC
#DevOps #Tech #Automation #CloudNative
Module set beta, Version v0.159.0
🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Ftelemetry%2Ftelemetrytest%2Fv0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:22 UTC
#DevOps #Tech #Automation #CloudNative
GitHub
Release service/telemetry/telemetrytest/v0.159.0 · open-telemetry/opentelemetry-collector
Module set beta, Version v0.159.0
🚀 OpenTelemetry Collector service/v0.159.0 released
Module set beta, Version v0.159.0
🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Fv0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:22 UTC
#DevOps #Tech #Automation #CloudNative
Module set beta, Version v0.159.0
🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Fv0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:22 UTC
#DevOps #Tech #Automation #CloudNative
GitHub
Release service/v0.159.0 · open-telemetry/opentelemetry-collector
Module set beta, Version v0.159.0
🚀 OpenTelemetry Collector v1.65.0/v0.159.0 released
Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.159.0 End User Changelog 💡 Enhancements 💡 pkg/exporterhelper : Add the pkg.exporterhelper.queueBatchEnabled feature gate ( #14038 , #13582 , ...
🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:37 UTC
#DevOps #Tech #Automation #CloudNative
Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.159.0 End User Changelog 💡 Enhancements 💡 pkg/exporterhelper : Add the pkg.exporterhelper.queueBatchEnabled feature gate ( #14038 , #13582 , ...
🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:37 UTC
#DevOps #Tech #Automation #CloudNative
GitHub
Release v0.159.0 · open-telemetry/opentelemetry-collector-releases
Check the v0.159.0 contrib changelog and the v0.159.0 core changelog for changelogs on specific components.
Changelog
f817832 Update version to 0.159.0 (#1607)
c5fb418 Update OpenTelemetry Collect...
Changelog
f817832 Update version to 0.159.0 (#1607)
c5fb418 Update OpenTelemetry Collect...
npm-пакет
Зловмисник виявив, що workflow дозволяв фактично будь-якому учаснику Pull Request ініціювати публікацію пакета шляхом додавання коментаря
Було опубліковано 10 заражених версій. Шкідливий код активувався під час встановлення пакета та намагався:
• викрасти GitHub credentials / tokens;
• отримати доступ до Google Cloud metadata;
• виявити інструменти SSH/SCP;
• переглянути список запущених процесів;
• завантажити та виконати додатковий payload за допомогою Bun.
Ключовий висновок для спеціалістів DevOps: механізми Trusted Publishing/OIDC не забезпечують захисту від компрометації, якщо сам CI/CD workflow дозволяє недовіреному користувачу ініціювати job із підвищеними привілеями. Необхідно перевіряти
У разі використання пакета автори рекомендують перейти на відому безпечну версію, ізолювати потенційно уражені системи та виконати ротацию усіх credentials, до яких мав доступ runner.
@7nohe/openapi-react-query-codegen був скомпрометований внаслідок недосконалої конфігурації workflow GitHub Actions.Зловмисник виявив, що workflow дозволяв фактично будь-якому учаснику Pull Request ініціювати публікацію пакета шляхом додавання коментаря
npm publish. При цьому відсутня перевірка повноважень користувача на виконання релізу. Завдяки механізмам npm Trusted Publishing та OIDC, workflow мав достатній рівень привілеїв для публікації шкідливих версій пакета.Було опубліковано 10 заражених версій. Шкідливий код активувався під час встановлення пакета та намагався:
• викрасти GitHub credentials / tokens;
• отримати доступ до Google Cloud metadata;
• виявити інструменти SSH/SCP;
• переглянути список запущених процесів;
• завантажити та виконати додатковий payload за допомогою Bun.
Ключовий висновок для спеціалістів DevOps: механізми Trusted Publishing/OIDC не забезпечують захисту від компрометації, якщо сам CI/CD workflow дозволяє недовіреному користувачу ініціювати job із підвищеними привілеями. Необхідно перевіряти
author_association та повноваження для команд, надісланих у PR, уникати виконання коду з недовірених PR у release jobs та максимально обмежувати доступ id-token: write.У разі використання пакета автори рекомендують перейти на відому безпечну версію, ізолювати потенційно уражені системи та виконати ротацию усіх credentials, до яких мав доступ runner.
👍1😢1
🚀 Pulumi pkg/v3.258.0: Changelog and go.mod updates for v3.258.0 (#24355) released
Co-authored-by: github-actions github-actions@github.com
🔗 Read more: https://github.com/pulumi/pulumi/releases/tag/pkg%2Fv3.258.0
📰 Source: GitHub Releases (IaC & Provisioning)
📅 2026-08-18 06:42 UTC
#DevOps #Tech #Automation #CloudNative
Co-authored-by: github-actions github-actions@github.com
🔗 Read more: https://github.com/pulumi/pulumi/releases/tag/pkg%2Fv3.258.0
📰 Source: GitHub Releases (IaC & Provisioning)
📅 2026-08-18 06:42 UTC
#DevOps #Tech #Automation #CloudNative
GitHub
Release pkg/v3.258.0: Changelog and go.mod updates for v3.258.0 (#24355) · pulumi/pulumi
Co-authored-by: github-actions github-actions@github.com
🔥 Prometheus 3.14.0 / 2026-08-17 released
[CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all . Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major r...
🔗 Read more: https://github.com/prometheus/prometheus/releases/tag/v3.14.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-18 08:49 UTC
#DevOps #Tech #Automation #CloudNative
[CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all . Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major r...
🔗 Read more: https://github.com/prometheus/prometheus/releases/tag/v3.14.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-18 08:49 UTC
#DevOps #Tech #Automation #CloudNative
GitHub
Release 3.14.0 / 2026-08-17 · prometheus/prometheus
[CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all. Other values still enable basic statistics but now return a deprecatio...
🚀 Cilium 1.19.7 released
New release of Cilium in the Networking & Mesh category.
🔗 Read more: https://github.com/cilium/cilium/releases/tag/1.19.7
📰 Source: GitHub Releases (Networking & Mesh)
📅 2026-08-18 09:33 UTC
#DevOps #Tech #Automation #CloudNative
New release of Cilium in the Networking & Mesh category.
🔗 Read more: https://github.com/cilium/cilium/releases/tag/1.19.7
📰 Source: GitHub Releases (Networking & Mesh)
📅 2026-08-18 09:33 UTC
#DevOps #Tech #Automation #CloudNative
GitHub
Release 1.19.7 · cilium/cilium
Release v1.19.7
🚀 Online Boutique on EKS, GKE, and AKS — what stayed the same
Same Online Boutique on EKS, GKE, and AKS: what stayed portable (digests, Argo) vs CI, signing, and SRE forks — three pilots, then torn… Continue reading on Medium »
🔗 Read more: https://medium.com/@btilki/online-boutique-on-eks-gke-and-aks-what-stayed-the-same-c6d4a05dbcba?source=rss------platform_engineering-5
📰 Source: Medium
📅 2026-08-19 05:28 UTC
#DevOps #Tech #Automation #CloudNative
Same Online Boutique on EKS, GKE, and AKS: what stayed portable (digests, Argo) vs CI, signing, and SRE forks — three pilots, then torn… Continue reading on Medium »
🔗 Read more: https://medium.com/@btilki/online-boutique-on-eks-gke-and-aks-what-stayed-the-same-c6d4a05dbcba?source=rss------platform_engineering-5
📰 Source: Medium
📅 2026-08-19 05:28 UTC
#DevOps #Tech #Automation #CloudNative
Medium
Online Boutique on EKS, GKE, and AKS — what stayed the same
Same Online Boutique on EKS, GKE, and AKS: what stayed portable (digests, Argo) vs CI, signing, and SRE forks — three pilots, then torn…
🚀 React Router v8: A Deliberately Boring Release with ESM-Only Builds and Default Middleware
<img src="https://res.infoq.com/news/2026/08/react-route-v8/en/headerimage/generatedHeaderImage-1787041418977.jpg" /><p>React Router v8 was released on June 17, 2026, with minimal breaking changes and
🔗 Read more: https://www.infoq.com/news/2026/08/react-route-v8/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 06:21 UTC
#DevOps #Tech #Automation #CloudNative
<img src="https://res.infoq.com/news/2026/08/react-route-v8/en/headerimage/generatedHeaderImage-1787041418977.jpg" /><p>React Router v8 was released on June 17, 2026, with minimal breaking changes and
🔗 Read more: https://www.infoq.com/news/2026/08/react-route-v8/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 06:21 UTC
#DevOps #Tech #Automation #CloudNative
🚀 When engineering delivery problems are actually organizational problems
It’s not uncommon to see companies struggling to deliver value to their business/customer in a timely manner. Sometimes they even lose the… Continue reading on Medium »
🔗 Read more: https://vicente-nvt.medium.com/when-engineering-delivery-problems-are-actually-organizational-problems-905dc434a7df?source=rss------platform_engineering-5
📰 Source: Medium
📅 2026-08-19 06:48 UTC
#DevOps #Tech #Automation #CloudNative
It’s not uncommon to see companies struggling to deliver value to their business/customer in a timely manner. Sometimes they even lose the… Continue reading on Medium »
🔗 Read more: https://vicente-nvt.medium.com/when-engineering-delivery-problems-are-actually-organizational-problems-905dc434a7df?source=rss------platform_engineering-5
📰 Source: Medium
📅 2026-08-19 06:48 UTC
#DevOps #Tech #Automation #CloudNative
Medium
When engineering delivery problems are actually organizational problems
It’s not uncommon to see companies struggling to deliver value to their business/customer in a timely manner. Sometimes they even lose the…
Please open Telegram to view this post
VIEW IN TELEGRAM
🚀 The Silent Cost of Fixing the Same Problem Every Week (And the Engineering Approach That Ends It)
The Problem That Shows Up as Systems Grow Continue reading on Medium »
🔗 Read more: https://medium.com/@i_m_asadjan/the-silent-cost-of-fixing-the-same-problem-every-week-and-the-engineering-approach-that-ends-it-2b524a863e0d?source=rss------sre-5
📰 Source: Medium
📅 2026-08-19 07:38 UTC
#DevOps #Tech #Automation #CloudNative
The Problem That Shows Up as Systems Grow Continue reading on Medium »
🔗 Read more: https://medium.com/@i_m_asadjan/the-silent-cost-of-fixing-the-same-problem-every-week-and-the-engineering-approach-that-ends-it-2b524a863e0d?source=rss------sre-5
📰 Source: Medium
📅 2026-08-19 07:38 UTC
#DevOps #Tech #Automation #CloudNative
Medium
The Silent Cost of Fixing the Same Problem Every Week (And the Engineering Approach That Ends It)
The Problem That Shows Up as Systems Grow
🚀 Multi Agent Collaboration Gets Persistent Compute in Bedrock AgentCore
<img src="https://res.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/en/headerimage/generatedHeaderImage-1787061024394.jpg" /><p>Amazon Web Services has extended Amazon Bedrock AgentCore with ru
🔗 Read more: https://www.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 08:00 UTC
#DevOps #Tech #Automation #CloudNative
<img src="https://res.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/en/headerimage/generatedHeaderImage-1787061024394.jpg" /><p>Amazon Web Services has extended Amazon Bedrock AgentCore with ru
🔗 Read more: https://www.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 08:00 UTC
#DevOps #Tech #Automation #CloudNative
🚀 .NET 11 Preview 7 Brings Updates Across C#, ASP.NET Core, EF Core, and Windows Forms
<img src="https://res.infoq.com/news/2026/08/dotnet-11-preview-7/en/headerimage/twitterCard-1787081506416.jpg" /><p>Last week Microsoft released .NET 11 Preview 7, with updates across C#, ASP.NET Core
🔗 Read more: https://www.infoq.com/news/2026/08/dotnet-11-preview-7/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 09:26 UTC
#DevOps #Tech #Automation #CloudNative
<img src="https://res.infoq.com/news/2026/08/dotnet-11-preview-7/en/headerimage/twitterCard-1787081506416.jpg" /><p>Last week Microsoft released .NET 11 Preview 7, with updates across C#, ASP.NET Core
🔗 Read more: https://www.infoq.com/news/2026/08/dotnet-11-preview-7/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 09:26 UTC
#DevOps #Tech #Automation #CloudNative